Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

rootless: fix --uts=host and --pid=host #1349

Closed

Conversation

giuseppe
Copy link
Member

Fix --uts=host and --pid=host with rootless containers.

Unfortunately the fix for --pid=host is not enough (so no tests were added) as it requires this patch in runc: opencontainers/runc#1832

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Fix the test for checking when /sys must be bind mounted from the
host.  It should be done only when userNS are enabled (the
!UsernsMode.IsHost() check is not enough for that).

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Unfortunately this is not enough to get it working as runc doesn't
allow to bind mount /proc.

Depends on: opencontainers/runc#1832

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
@giuseppe giuseppe force-pushed the rootless-fix-uts-pid-host branch from a04fa94 to a9f9d40 Compare August 27, 2018 11:42
@TomSweeneyRedHat
Copy link
Member

LGTM, assuming happy tests

@mheon
Copy link
Member

mheon commented Aug 27, 2018

LGTM

@rhatdan
Copy link
Member

rhatdan commented Aug 27, 2018

@rh-atomic-bot r+

@rh-atomic-bot
Copy link
Collaborator

📌 Commit a9f9d40 has been approved by rhatdan

@rh-atomic-bot
Copy link
Collaborator

⚡ Test exempted: pull fully rebased and already tested.

rh-atomic-bot pushed a commit that referenced this pull request Aug 27, 2018
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1349
Approved by: rhatdan
rh-atomic-bot pushed a commit that referenced this pull request Aug 27, 2018
Fix the test for checking when /sys must be bind mounted from the
host.  It should be done only when userNS are enabled (the
!UsernsMode.IsHost() check is not enough for that).

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1349
Approved by: rhatdan
rh-atomic-bot pushed a commit that referenced this pull request Aug 27, 2018
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1349
Approved by: rhatdan
rh-atomic-bot pushed a commit that referenced this pull request Aug 27, 2018
Unfortunately this is not enough to get it working as runc doesn't
allow to bind mount /proc.

Depends on: opencontainers/runc#1832

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1349
Approved by: rhatdan
vrothberg added a commit to vrothberg/libpod that referenced this pull request Feb 25, 2019
Rephrase the description of Buildah to make some core attributes
(e.g., rootless, Dockerfile-less build, etc.) more obvious.

Addresses: [containers#1349 (comment)](containers/buildah#1349 (comment))
Cherry-pick-from: containers/buildah#1362
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
@giuseppe giuseppe deleted the rootless-fix-uts-pid-host branch February 26, 2019 10:31
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 27, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 27, 2023
# for free to subscribe to this conversation on GitHub. Already have an account? #.
Labels
locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants